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Detailed Action 



Response to Amended Claims 



Claim Rejections - 35 USC § 102 



1 . The following is a quotation of the appropriate paragraphs of 35 U.S. C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

2. Claims 1-10, 12-30, 32-39 are rejected under 35 USC 102(e) as being 
anticipated by Maloney et al., (U.S. Patent 6549208). 

3. Regarding claim 1 , Maloney teaches a method carried out by a computer when 
executing computer-readable program code, the method comprising: 

• receiving a certain electronic file intended for delivery from a sender 
to an intended recipient, the certain electronic file having a first file 
format and containing a computer virus (Maloney, col.2, 1.45-54); 
and 

• prior to the certain electronic file being made available for viewing 
by the intended recipient, converting the certain electronic file to a 
second file format that is different from the first file format and that 
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prevents the computer virus from executing when the converted 
electronic file is opened by the intended recipient (Maloney, col, 4, 
1.39-42. col.9, 1.45-53 ); 

• wherein it is determined whether the certain electronic file 
represents a potential risk to security of a computer system 
(Maloney, col. 2, 1.30-33, 1.50-51 ). 

• said converting the certain electronic file being in response to a 
determination that the certain electronic file represents the potential 
risk to the security of the computer systems (Maloney, col. 2. 1.2-3, 
col.6. 1.33, 1.66-67,001.7, 1.1-4). 

4. Regarding claim 2, Maloney further discloses the method of claim 1 , the certain 
electronic file being an attachment to an electronic mail sent over a network 
(Maloney , col. 2, 1.54). 

5. Regarding claim 3, Maloney further discloses the method of claim 2, the network 
including the internet (Maloney, col.6, 1.30-31). 

6. Regarding claim 4, Maloney further discloses the method of claim 1 , said 
receiving occurring at a desktop computer of the intended recipient (Maloney, 
col.5, 1.59-61). 

7. Regarding claim 5, Maloney further discloses the method of claim 1 , said 
receiving occurring at a server computer (Maloney, Fig.6, col. 4, 1.36). 

8. Regarding claim 6, Maloney further discloses the method of claim 1 , said 
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receiving occurring at a gateway computer (Maloney, Fig. 6. coL1 1, 1.55) . 

9. Regarding claim 7, Maloney further discloses the method of claim 1 , said 
converting occurring at a desktop computer of the intended recipient (Maloney, 
Fig. 3, col. 2, 1.24-25, col. 5, 1.60. col.7, 1. 30-33, " that means the collection of 
multiple interconnected computer of intended recipient including the PC " ). 

1 0. Regarding claim 8, Maloney further discloses the method of claim 1 , said 
converting occurring at a server computer (Maloney, Fig. 3, col. 2, 1.24-25, col. 4, 
1.36, col.7, 1. 30-33, " .. that means the collection of multiple interconnected 
computer of intended recipient including the server computer.. " ). 

1 1 . Regarding claim 9, Maloney further discloses the method of claim 1 , said 
converting occurring at a gateway computer (Maloney, Fig. 3,Fig. 6, col. 2, 1.24- 
25, col. 11, 1.55, col.7, 1. 30-33, " .. that means the collection of multiple 
interconnected computer of intended recipient including the server computer.. " ). 

1 2. Regarding claim 1 0, Maloney further discloses the method of claim 1 , said 
converting occurring prior to the intended recipient receiving the certain 
electronic file (Maloney, col. 2, 1.50-51). 

13. Regarding claim 12, Maloney further discloses the method of claim 1 , said 
determining whether the certain electronic file represents the potential risk 
comprising: determining if the certain electronic file contains the computer virus 
(Maloney, col. 12, 1.35-38). 

14. Regarding claim 13, Maloney further discloses the method of claim 1, said 
determining whether the certain electronic file represents the potential risk 
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comprising: conducting a heuristic scan of the certain electronic file (Maloney, 
col. 9, 1.39-44). 

1 5. Regarding claim 1 4, Maloney further discloses the method of claim, the certain 
electronic file being a first electronic file, further comprising: 

• receiving a second electronic file intended for delivery from another 
sender to another intended recipient, the second electronic file 
having a third file format and containing another computer virus 
(Maloney, col.4, 1.49); and 

• prior to the second electronic file being made available for viewing by 
the another intended recipient, converting the second electronic file 
to a fourth file format that is different from the third file format and 
that prevents the another computer virus from executing when the 
converted second electronic file is opened by the another intended 
recipient (Maloney, col.11, 1.36-41, col. 12, 1.16-24, " which means the 
analysis system established a target source packet format which 
could be modified to shut down a target under attack). 



1 6. Regarding claim 1 6, Maloney further discloses the method of claim 1 , the second 
file format being at least one of a TXT file format, a RTF file format without 
embedded objects, a BMP file format, a JPEG file format, a CSV file format, a 
JPB file format, a GIF file format, a HTML file format without scripts, and a ASCII 
file format (Maloney, col. 10, 1.24-25) . 
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1 7. Regarding claim 1 7. Maloney further discloses the method of claim 1 6. the 
second file format being the HTML file format without scripts (Maloney, col. 10, 
1.24-25). ' 

18. Regarding claim 1 8, Maloney further discloses the method of claim 1 6, the 
second file format being the ASCII file format file (Maloney, col.1, 1.10-1 1). 

1 9. Regarding claim 1 9. Maloney further discloses the method of claim 1 6, the 
second file format being the TXT file format (Maloney, col. 6, 1.52-53). 

20. Regarding claim 20, Maloney further discloses the method of claim 1 , the second 
file format being a file format having text without scripts (Maloney , col. 10, 1.1-4). 

21 . Regarding claim 21 , Maloney further discloses the method of claim 1 , the certain 
electronic file being at least one of a word processing file, a spreadsheet file, a 
database file, a graphics file, a presentation file, a compressed file, and a binary 
executable file (Maloney, col. 6. 1.55-56, col. 10, 1.30-32). 

22. Regarding claim 22, Maloney further discloses the method of claim 1 , further 
comprising: 

• determining if the first file format is one of a word processing file 
format type and a graphics file format type (Maloney, col. 10, 1.30- 
32). 

• the second file format being at least one of a TXT file format, a 
RTF file format without embedded objects, and a HTML file format 
without scripts if it is determined that the certain file format is the 
word processing file format type (Maloney, col. 6, 1.52-53), 
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• the second file format being at least one of a JPB file format, a 
BMP file format, a GT file format, a HTML file format without 
scripts, and a TPEG file format if it is determined that the first file 
format is the graphics file format type (Maloney, col. 10, 1.30-33). 

23. Regarding claim 23, Maloney further discloses the method of claim 1 , the certain 
electronic file being an electronic file received by at least one of a RTP transfer or 
a HTTP transfer protocol (Maloney. col. 5, 1.2). 

24. Regarding claim 24, Maloney further discloses a method for implementing a 
security policy, the method comprising: 

• determining whether an electronic file represents a potential risk to 
security of a computer system (Maloney, col. 2, 1.15-19); and 

• prior to making the electronic file available to an intended recipient 
of the electronic file, converting the electronic file into a safe format 
that ensures that a computer virus in the electronic file is unable to 
harm the computer system (Maloney, col. 1 , 1.60-67). 

• said converting the electronic file being in response to the 
determination that the electronic file represents the potential risk to 
the security of the computer systems (Maloney, col.2, 1.2-3, col. 6, 
1.33, 1.66-67, col.7, 1.1-4). 

• 

25. Regarding claim 25. Maloney further discloses the method of 24, said 
determining comprising: 
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• Determining whether the electronic file has a file extension 
indicative of a file type that supports a potential computer vims 
(Maloney. col.4, 1.42-61). 

26. Regarding claim 26, Maloney further discloses the method of 24, said 
determining comprising: detecting whether the electronic file contains the 
computer virus (Maloney, col.1, 1.56-58, coL2, 1.17, ). 

27. Regarding claim 27, Maloney further discloses the method of 24, said 
determining comprising: determining whether content of the electronic file reflects 
a potential computer virus (Maloney, col. 2, 1. 48-51 ). 

28. Regarding claims 28-30, 32-35 have similar limitation as claims 1,2, 10-12, 15- 
16, and 22. Therefore, claims 28-30, 32-35 are rejected under Maloney for the 
same reason set forth in the rejection of claim 1,2,10-12, 15-16. 

29. Regarding claim 36, Maloney further discloses an apparatus comprising: 

• a computer having means for receiving a certain electronic file 
intended for delivery from a sender to a intended recipient, the 
certain electronic tile having a first file format and containing a 
computer virus (Maloney, col, 2, 1.45-54); 

• the computer further including means for converting, prior to the 
certain electronic file being made available for viewing by the 
intended recipient, the certain electronic file from the first file format 
to a second file format that is different from the first file format and 
that prevents the computer virus from executing when the 
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converted electronic file is opened by the intended recipient 
(Maloney. col. 4, 1.39-42). 

• wherein it is determined whether the certain electronic file 
represents a potential risk to security of a computer system 
(Maloney. col. 2, 1.30-33. 1.50-51). 

• said converting the certain electronic file being in response to a 
determination that the certain electronic file represents the potential 
risk to the security of the computer systems (Maloney, col.2, 1.2-3. 
col.6. 1.33. 1,66-67, col.7, 1.1-4). 

30. Regarding claim 37. Maloney further discloses the apparatus of claim 36, said 
computer being a desktop computer of the intended recipient (Maloney, col. 5, 
1.59-61). 

31 . Regarding claim 38, Maloney further discloses the apparatus of claim 36, said 
computer being a server computer of a local area network (Maloney, Fig. 6, col.2, 
1.26-27). 

32. Regarding claim 39. Maloney further discloses the apparatus of claim 36, said 
Computer being a gateway computer (Maloney, Fig. 6, col.1 1, 1.43-56). 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not Identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

33. Claims 15, and 34 are rejected under 35 U.S.C 103(a) as being 

unpatentable over Maloney in view of Chen (US Patent 5960170). 

34. Regarding claims 15, and 34 Maloney differs from the claimed invention 

in that it does not explicitly indicate the computer virus including macro virus, 
instead of stating " ...to determine if a computer virus is present., and then 
determining if the generic structure is resident in ... e-mail attachments.. " 
(Maloney, col. 2, 1.50-54). Chen teaches "the macros viruses used in the 
electronic mail ..." (Chen, col. 14, 1.54-57). With Chen's elaboration and 
Maloney's description, therefore, it would have been obvious to one of ordinary 
skill in the art at the time the invention was made to combine Chen's definition of 
macro virus with Maloney's e-mail attachment assertion and identified them more 
clearly. 
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Response to Remarks 

35. The Application's arguments with respect to claims 1-39 have been considered 
but are not persuasive . Examiner appreciates detail description of prior art. 

36. Regarding claim 11, which has been amended in claims 1 , 28, and 36, applicant 
argues ".. that prevents the computer virus from executing when the converted 
electronic file is open by the intended recipient.". Examiner contends Maloney discloses 
that the security analysis system including a discovery too for actively or passively 
monitoring by means of data channel (Maloney, col.4, 1.20-23), also he discloses that 
the output be written to flat files (Maloney, fig.2, component of 30), and a user 
(recipient) is able to determine if the knowledge base contains an object or determine 
the set of object belonging to a class of the knowledge base (Maloney, col.9, 1.45-53). In 
other words, the user can set the mode either inactive or active and then open the file to 
respond the determination. 

37. Furthermore, applicant argues that "conversion the electronic file being in 
response to a determination that the certain electronic file represents the potential risk 
to the security of the computer system"; Again, Maloney clearly discloses that 
knowledge base parsing tool converts the captured network data to a form usable by 
the analytical engine, which the user is able to determine (Maloney, col.9, 1.45-53) with 
active or inactive way. It has been mentioned above. 

38. Regarding claim 22, Examiner contends Maloney discloses that an internal 
packet-processing engine decodes data packets and converts the Raw data to 
information elements that are accessible to all the tools, which is the HTML flat files 
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(Maloney , coL7, 1.30-33, col. 10, 1.23-24). Further, Maloney discloses the graphic 
extension tool converts HTML file containing JPG and GIF and creates a new log file 
that is HTML flat files. Therefore, meets at least one of the file format criteria. 
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Conclusion 

Application's amendment necessitated the new ground(s) of rejection presented 
in this Office action, Accordingly, THIS ACTION IS MADE FINAL. See MERE 
706.07(a). Applicant is reminded of the extension of time policy as set forth in 37CFR 
1.136(a). 

A shortened statutory period for reply to this inal action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first replay is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE MONTH shortened statutory period, then the 
shortened statutory period will expire on the date advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTH from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kelvin Lin whose telephone number is 703-605-1726. 
The examiner can nornnally be reached on Flexible 4/9/5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Jack Harvey can be reached on 703-305-9705. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status Information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 

For more information about the PAIR system, see http://pair-direct.uspto.gov. 
Should you have questions on access to the Private PAIR system, contact the 
Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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